f91668558e9cedd5f2e97a0ea04d3263_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f91668558e9cedd5f2e97a0ea04d3263_JaffaCakes118
Size

401KB
MD5

f91668558e9cedd5f2e97a0ea04d3263
SHA1

16883512bd992e01f260e29101d994b3995e6362
SHA256

0c13fec3ecbe6bfdb8b862e1600b395464b622efa69ae892e13325fd36e0d95c
SHA512

4ed5bdeedc8d02c8e83b41be5c049bb5ecf8aaf67aa8919d445f83e18bbe672ee3e5d06f0a02da894b92d73493035dabbbf437958b9845b9373a74d9b9031b81
SSDEEP

6144:hLUYAvpFuCTaWW3gXhWXvOPo2tRvZNJcKoit4t9XXgV5r4079lZye0VNYKj:ZevCQxW3g4EXPehy4t9XwVZjkVTZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f91668558e9cedd5f2e97a0ea04d3263_JaffaCakes118

Files

f91668558e9cedd5f2e97a0ea04d3263_JaffaCakes118
.exe windows:4 windows x86 arch:x86

14d067cc6468f59dcfa1566a54c1a341

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessagePos
BringWindowToTop
CreateWindowStationW
OemToCharW
InflateRect
SetMenuDefaultItem
CharUpperBuffA
GetScrollInfo
ChangeDisplaySettingsExW
SetWindowsHookW
InsertMenuA
ChangeClipboardChain
GetMenuInfo
GetMessageW
GetUserObjectSecurity
CheckRadioButton
SetCaretPos
IsDialogMessage
RegisterClassW
DdeUnaccessData
OpenInputDesktop
BeginPaint
UnpackDDElParam
EnableScrollBar

advapi32

CryptEnumProvidersW
RegEnumValueA
CryptSetKeyParam
RegDeleteKeyA
RegQueryMultipleValuesA
LookupPrivilegeValueA
RegOpenKeyExW
ReportEventW
RegEnumKeyA
LookupPrivilegeNameW
CryptSignHashW
InitializeSecurityDescriptor
CryptDestroyKey
CryptDecrypt
LookupSecurityDescriptorPartsA

comdlg32

PageSetupDlgW
LoadAlterBitmap
ChooseFontW
ReplaceTextW
GetOpenFileNameW
PrintDlgA
ChooseColorA
GetSaveFileNameW
ChooseColorW
GetFileTitleW
ChooseFontA
ReplaceTextA
GetSaveFileNameA
GetFileTitleA

gdi32

PtVisible
SetFontEnumeration
GetTextExtentExPointA
FlattenPath
GetCharacterPlacementA
SetBitmapDimensionEx
StartDocW
GetDeviceCaps
GetTextCharset
SetArcDirection
PolylineTo
SetMiterLimit
GetNearestColor

kernel32

GetModuleHandleA
GetCurrentThreadId
lstrcpyA
GetModuleFileNameA
TerminateProcess
VirtualQuery
GetTimeZoneInformation
ExitProcess
GetFileType
InterlockedExchange
GetFileSize
GetCurrentProcessId
GetCompressedFileSizeW
LeaveCriticalSection
HeapAlloc
CreatePipe
GetTickCount
ExpandEnvironmentStringsA
CommConfigDialogW
SetVolumeLabelA
LoadLibraryA
QueryPerformanceCounter
GetProcAddress
VirtualAlloc
GetDriveTypeA
RtlUnwind
HeapReAlloc
GetCurrentProcess
HeapFree
GetSystemTimeAsFileTime

Sections

.text
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 265KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

14d067cc6468f59dcfa1566a54c1a341

Headers

File Characteristics

Imports

user32

advapi32

comdlg32

gdi32

kernel32

Sections

.text Size: 121KB - Virtual size: 121KB

.data Size: 265KB - Virtual size: 264KB

.rsrc Size: 14KB - Virtual size: 13KB

.text
Size: 121KB - Virtual size: 121KB

.data
Size: 265KB - Virtual size: 264KB

.rsrc
Size: 14KB - Virtual size: 13KB